Re: secure cross-platform JavaScript desktop apps.
Oxymoron.
Real production applications of any kind for local execution should not be written in javascript, or indeed anything else really intended to help the functionality of a website. They should use a proper programming language, the minimum being the kind compiled to an intermediate code.